Individual filenames are withheld. Each entry shows its type, its folder within the package and its own SHA-256.
SVG · includes/css/fonts
2746e082963d499f…
1.88 MB
SVG · includes/css/fonts
4fd4e3cfa5401970…
1.87 MB
SVG · includes/css/fonts
92ce861ef4b93433…
1.87 MB
SVG · includes/css/fonts
e1edfd460f678b5f…
1.87 MB
SVG · includes/css/fonts
36c55e53bdffd0a1…
1.85 MB
SVG · includes/css/fonts
c01783ea12d155af…
1.84 MB
SVG · includes/css/fonts
df919726eba522d3…
1.81 MB
SVG · includes/css/fonts
d6da102d182904a5…
1.80 MB
Code signals
4 present
Observations, not findings. Every construct below appears in ordinary, legitimate plugins — they are listed so you can judge for yourself. Only ClamAV decides this package's verdict.
unserialize
Unsafe when given untrusted input
Deserialization8
base64_decode
Decodes base64 — routine, but also how packed code hides
Obfuscation6
gzinflate
Decompresses a string in memory
Obfuscation5
curl_exec
Makes an outbound HTTP request
Remote request2
Referenced hosts
20 distinct
Domains appearing in the package source. Most are documentation links or CDNs; their presence is not evidence the package contacts them.